Bu çalışmada, bilgi teknolojisi departmanına sahip olan kurumlara anket çalışması yapılarak; KVKK ve GDPR kapsamında kurumların uyum sürecinde, mevcutta bilgi varlıklarına yönelik aldıkları önlemleri saptamak, KVKK ve GDPR ile ilgili temel kavramları bilme düzeylerini ölçerek uyum sürecinin ne derece anlaşıldığı saptanmak istenmiştir. Bahsedilen anket çalışması, İstanbul’da bilişim, teknoloji, eğitim ve endüstri sektöründen birbirinden farklı 38 firma ile temelde 3 ana sorun belirlenerek gerçekleştirilmiştir. Birinci olarak, firmalardaki yetkili kişilerin bilgi güvenliği farkındalıklarını tespit etmeye yönelik sorular sorulmuştur. İkinci olarak, bu yetkili kişilere KVKK ve GDPR kapsamında temel terimler sorularak uyum sürecini doğru anlayıp anlamadıkları tespit edilmeye çalışılmış ve son olarak firmaların karşılaştıkları ataklar ve bu ataklara karşı alınan tedbirler hakkında teorik bilgi edinilmiştir.
In this study, the information technology department has an investigation work to the institutions; in the framework of the KVKK and GDPR, the institutions are required to determine the measures they take towards the information assets in the present, measure the level of knowledge of the basic concepts related to the KVKK and GDPR, to determine how clear the process of conformity is understood. The survey was carried out in Istanbul with 38 different companies from the information, technology, education and industry sector based on 3 main problems. First, questions were asked to identify the information security awareness of the competent persons in the companies. Secondly, these authorized persons were asked for the basic terms within the framework of the GDPR and GDPR to determine whether they understand the process of compliance correctly and finally theoretical information about the attacks that companies encounter and the measures taken against these attacks was obtained.
In this study, a questionnaire study conducted to organizations that have Information Technologies Department; in their adaptation process within the scope of the KVKK and GDPR, it is aimed to determine the precautions that they take for their information assets, and to determine the extent to which the orientation period is understood by evaluating their level of knowledge of basic concepts about the KVKK and GDPR. The mentioned survey study, conducted with 38 different companies in the sectors of informatics, technology, education, and industry in Istanbul; essentially 3 major issues are specified. First, questions enquired to authorized persons at the firm to ascertain their information security awareness. Secondly, within the KVKK and GDPR, fundamental terms are asked to that authorized personnel in order to determine whether they understood the adaptation process right or not. Lastly, theoretical information obtained about the attacks that companies faced, and the measures taken against those attacks.
Dergi Türü : Ulusal
Benzer Makaleler | Yazar | # |
---|
Makale | Yazar | # |
---|